{"uuid": "a07fdcc6-8950-4cc1-8586-abd2f6f41c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-35273", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3331", "content": "\ud83d\udd34 Google Warns of ShinyHunters\u2019 Fresh Oracle PeopleSoft Campaign\n\nMandiant and Google Threat Intelligence Group (GTIG) over the weekend warned that the notorious extortion group ShinyHunters has launched a fresh mass-exploitation campaign targeting Oracle PeopleSoft customers.\n\nAn integrated enterprise resource planning (ERP) software suite, PeopleSoft is used across numerous large enterprises for the management of core business functions, including finance, HR, payroll, and supply chain.\n\nGoogle\u2019s warning comes four months after the hacking group was seen exploiting a zero-day vulnerability in PeopleSoft, tracked as CVE-2026-35273, to gain remote code execution without authentication.", "creation_timestamp": "2026-09-28T14:16:04.000000Z"}